Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/W0mTconyZYjUSe1k3BVTRKDsyM0.roa
File: W0mTconyZYjUSe1k3BVTRKDsyM0.roa (raw, json)
Hash identifier: aZDfCKteyYgyZPXD5lpqn100y5sChuMfo0D6PUjlO74=
Subject key identifier: 5B:49:93:72:89:F2:65:88:D4:49:ED:64:DC:15:53:44:A0:EC:C8:CD
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F23691A4B2DB654D854CA8EFBCB8D7C0E
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/W0mTconyZYjUSe1k3BVTRKDsyM0.roa
Signing time: Thu 02 Jul 2026 15:18:38 +0000
ROA not before: Thu 02 Jul 2026 15:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209880
IP address blocks: 212.243.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1a:4b:2d:b6:54:d8:54:ca:8e:fb:cb:8d:7c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b49937289f26588d449ed64dc155344a0ecc8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:41:00:1f:38:9c:d5:23:89:ed:8e:53:7e:8a:
64:76:1e:9c:72:cf:91:ad:d4:1c:84:9c:cf:06:d0:
4c:c4:84:35:06:d2:d3:af:22:ca:f0:c1:b2:08:5e:
71:f9:b4:7c:01:87:ad:62:55:98:8f:70:d1:29:53:
02:56:67:1b:47:38:f4:ba:e0:0f:56:cd:53:b8:85:
28:2d:b7:26:40:f5:26:cf:e3:75:68:e1:f8:87:be:
95:c9:f3:40:ec:17:c4:d6:46:bf:f3:e9:8d:e2:72:
08:9c:f7:e4:37:d3:fa:fd:78:30:01:db:77:a9:59:
d6:05:e1:a8:cd:92:c4:f3:26:27:f7:72:b2:29:9b:
63:eb:54:d9:5c:20:d8:3b:d3:b2:59:ba:93:9b:3a:
42:f3:27:ba:71:5e:a8:c5:30:84:ea:ef:c0:65:f2:
0a:83:f5:f3:7f:3e:c4:cc:4f:88:68:ec:12:3d:cb:
a4:96:4f:3d:26:ae:cb:c4:fb:d7:1a:d2:0a:8d:bd:
42:2b:ec:83:74:59:8c:44:c0:24:6a:8a:bf:d3:6c:
31:e6:f2:5e:d7:7f:15:55:c1:fd:fb:9e:6b:e7:f3:
09:57:31:88:fa:95:70:00:8b:a5:7f:24:be:45:46:
3f:0a:65:49:8f:60:dd:bb:55:0b:e8:c8:82:42:d4:
1b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:49:93:72:89:F2:65:88:D4:49:ED:64:DC:15:53:44:A0:EC:C8:CD
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/W0mTconyZYjUSe1k3BVTRKDsyM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.125.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:b0:b6:a7:ae:be:e7:28:02:0f:11:c7:25:83:a0:c9:5e:af:
9a:90:f7:56:c6:0e:72:6b:05:d8:c3:59:5e:91:93:65:68:5d:
58:21:90:a5:83:f6:dd:4d:01:33:c4:80:78:6d:3c:60:6c:29:
eb:49:fd:f6:84:60:fa:59:8c:8c:a2:2c:07:a6:5f:fd:a4:0a:
dd:ec:3f:23:7f:6e:9d:23:ab:f9:a0:ec:b3:e6:28:1a:76:bc:
b0:89:5d:4e:17:a3:c8:56:ba:64:5d:31:a9:72:20:27:81:ff:
dc:b5:0e:0e:bc:b4:48:8f:da:d8:ca:96:a6:90:70:ab:f5:82:
e4:41:b7:56:06:8f:95:88:89:7a:de:b6:58:28:83:64:38:e4:
4c:74:0c:fb:38:f6:b9:87:3a:0d:cb:43:f9:00:f2:14:b8:87:
6f:06:a6:4a:0d:54:4e:5d:b6:de:c6:43:9e:30:a5:85:1e:78:
c4:9b:43:64:9c:9c:6d:04:e1:29:3e:e4:25:eb:93:45:7f:4e:
17:b4:ec:55:dd:25:4b:aa:eb:f8:c4:e7:76:df:d0:37:f6:78:
ec:05:41:5c:25:ec:07:ab:9e:5f:34:2f:87:54:82:6e:8a:06:
11:e8:54:15:9a:5a:2d:e1:b3:47:82:d8:97:64:e2:dd:ee:02:
93:ea:2e:35
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaRpLLbZU2FTKjvvLjXwOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MDY4ODk2YzA5ZGRkZjNjMWI3MzQ5NTYwZDBkZTRjNDBi
ZDlmOGYwHhcNMjYwNzAyMTUxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjQ5OTM3Mjg5ZjI2NTg4ZDQ0OWVkNjRkYzE1NTM0NGEwZWNjOGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkEAHzic1SOJ7Y5Tfopkdh6ccs+R
rdQchJzPBtBMxIQ1BtLTryLK8MGyCF5x+bR8AYetYlWYj3DRKVMCVmcbRzj0uuAP
Vs1TuIUoLbcmQPUmz+N1aOH4h76VyfNA7BfE1ka/8+mN4nIInPfkN9P6/XgwAdt3
qVnWBeGozZLE8yYn93KyKZtj61TZXCDYO9OyWbqTmzpC8ye6cV6oxTCE6u/AZfIK
g/Xzfz7EzE+IaOwSPcuklk89Jq7LxPvXGtIKjb1CK+yDdFmMRMAkaoq/02wx5vJe
138VVcH9+55r5/MJVzGI+pVwAIulfyS+RUY/CmVJj2Ddu1UL6MiCQtQbvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFtJk3KJ8mWI1EntZNwVU0Sg7MjNMB8GA1UdIwQY
MBaAFIYGiJbAnd3zwbc0lWDQ3kxAvZ+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGdhSWxzQ2QzZlBCdHpTVllORGVURUM5bjQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvVzBtVGNvbnlaWWpVU2UxazNCVlRSS0RzeU0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvaGdhSWxzQ2QzZlBCdHpTVllORGVURUM5bjQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1PN9MA0G
CSqGSIb3DQEBCwUAA4IBAQBLsLanrr7nKAIPEcclg6DJXq+akPdWxg5yawXYw1le
kZNlaF1YIZClg/bdTQEzxIB4bTxgbCnrSf32hGD6WYyMoiwHpl/9pArd7D8jf26d
I6v5oOyz5igadrywiV1OF6PIVrpkXTGpciAngf/ctQ4OvLRIj9rYypamkHCr9YLk
QbdWBo+ViIl63rZYKINkOORMdAz7OPa5hzoNy0P5APIUuIdvBqZKDVROXbbexkOe
MKWFHnjEm0NknJxtBOEpPuQl65NFf04XtOxV3SVLquv4xOd239A39njsBUFcJewH
q55fNC+HVIJuigYR6FQVmlot4bNHgtiXZOLd7gKT6i41
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:13 2026 by rpki-client